
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft
File: ddMZaVabXA3w2lOz2TE2YzRyEII.mft (raw, json)
Hash identifier: aRCcOA7vT4/gfpPzYpQMNVsQQaeXAmnD4Jy1LAcBGBk=
Subject key identifier: 1C:73:BB:CD:35:18:A2:8C:46:89:66:D4:E6:04:5B:44:5D:42:07:DD
Authority key identifier: 75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82
Certificate issuer: /CN=A915E5DF/serialNumber=75D31969569B5C0DF0DA53B3D931366334721082
Certificate serial: 01C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft
Manifest number: 01BC
Signing time: Mon 27 Jul 2026 05:38:52 +0000
Manifest this update: Mon 27 Jul 2026 05:38:51 +0000
Manifest next update: Mon 03 Aug 2026 05:38:51 +0000
Files and hashes: 1: ddMZaVabXA3w2lOz2TE2YzRyEII.crl (hash: gOw7mRSMYPHIXdYAPepQo7gNVcABlm4VN2acwczE8hY=)
2: 4483A1DE5EBD11EFAEB0D27FC4F9AE02.roa (hash: QYTVlNYkrEiZ8aShj9m0JqEjCBGJlJp7vXx5mGyVS/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl
rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:38:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E5DF, serialNumber=75D31969569B5C0DF0DA53B3D931366334721082
Validity
Not Before: Jul 27 05:38:51 2026 GMT
Not After : Aug 3 05:38:51 2026 GMT
Subject: CN=6a66eeec-496d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:07:07:24:a2:a0:53:fc:82:dd:81:90:ec:a4:
32:bc:d3:75:68:3d:51:7a:b9:cd:82:27:ca:ac:e9:
d6:21:ba:84:04:31:56:96:b9:64:01:6a:65:bc:c6:
1b:22:37:bb:6c:1a:d1:36:45:e1:12:e6:24:59:6c:
fe:cf:84:2f:8f:31:59:0a:81:23:92:e3:75:4b:5e:
b6:60:ed:c3:03:dc:3c:67:5d:64:95:a9:77:96:88:
7c:b7:9f:01:b3:60:a8:0e:df:e5:b6:19:ef:a5:ba:
49:9e:d3:aa:a9:08:46:f3:94:8b:1c:a8:45:7c:78:
f0:c3:c2:00:b4:7c:4e:1f:87:56:ab:5e:27:af:97:
87:63:66:67:31:10:e2:c6:2b:f8:fc:b4:99:c2:7f:
e4:3c:c6:f8:30:fd:aa:58:f8:bf:00:aa:dd:14:67:
b8:42:9f:77:37:e7:ca:f8:80:1b:78:13:49:b7:74:
c8:b0:07:5f:ba:e6:99:69:8b:e5:0d:55:74:db:e6:
fa:60:2f:6d:3a:dc:fd:ac:ad:dd:ec:50:d2:91:4d:
52:35:6c:46:91:50:66:9d:2e:fc:e9:c2:9c:7f:81:
01:53:65:c4:97:d4:45:5e:2f:c2:81:8f:d6:97:be:
0c:a2:5f:1b:0a:27:a0:65:54:27:fa:28:76:b8:57:
2c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:73:BB:CD:35:18:A2:8C:46:89:66:D4:E6:04:5B:44:5D:42:07:DD
X509v3 Authority Key Identifier:
keyid:75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b0:62:f4:2b:66:b7:5f:6d:34:3c:87:7d:57:ed:91:86:87:
74:2e:ed:a3:c9:3b:c3:c5:e5:8a:ed:c7:c5:19:38:42:a2:e4:
bd:6e:8c:d8:81:29:72:38:a1:a3:b6:1a:7c:5f:ae:bc:90:ab:
19:3c:50:87:51:0e:cf:29:e4:d9:15:6d:12:73:50:d0:57:7f:
09:9f:c9:79:9c:3e:a2:9c:a6:cc:c5:c0:1a:07:b2:cd:23:a2:
6b:b1:1b:13:1c:5d:81:a9:d6:fe:73:a6:42:85:45:91:cc:9d:
00:cb:5f:cb:b3:80:46:35:e9:41:2a:fc:f8:b7:02:6e:ca:33:
c2:19:45:df:de:f7:6f:43:38:c4:14:6b:ee:d8:98:18:4f:c6:
02:b6:97:c1:67:64:78:23:90:7d:ea:47:ce:96:a7:e8:96:47:
73:0a:0b:94:c8:00:5c:1c:58:ad:a5:a6:01:89:29:1f:94:d7:
84:22:47:27:43:db:f7:7a:af:e9:6e:9e:3e:fe:6c:43:c0:61:
30:f5:47:e9:6c:6e:24:aa:23:19:c8:61:0b:5d:dd:c4:a2:6a:
88:40:d1:d1:23:5b:bd:59:f6:77:29:c3:c1:9d:51:f2:f6:07:
0a:7a:fc:05:4c:2e:fe:2d:8f:2f:c4:5e:3f:22:f7:78:af:75:
19:56:60:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUU1REYxMTAvBgNVBAUTKDc1RDMxOTY5NTY5QjVDMERGMERBNTNCM0Q5MzEzNjYz
MzQ3MjEwODIwHhcNMjYwNzI3MDUzODUxWhcNMjYwODAzMDUzODUxWjAYMRYwFAYD
VQQDEw02YTY2ZWVlYy00OTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlQcHJKKgU/yC3YGQ7KQyvNN1aD1RernNgifKrOnWIbqEBDFWlrlkAWplvMYb
Ije7bBrRNkXhEuYkWWz+z4QvjzFZCoEjkuN1S162YO3DA9w8Z11klal3loh8t58B
s2CoDt/lthnvpbpJntOqqQhG85SLHKhFfHjww8IAtHxOH4dWq14nr5eHY2ZnMRDi
xiv4/LSZwn/kPMb4MP2qWPi/AKrdFGe4Qp93N+fK+IAbeBNJt3TIsAdfuuaZaYvl
DVV02+b6YC9tOtz9rK3d7FDSkU1SNWxGkVBmnS786cKcf4EBU2XEl9RFXi/CgY/W
l74Mol8bCiegZVQn+ih2uFcs1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBxzu801
GKKMRolm1OYEW0RdQgfdMB8GA1UdIwQYMBaAFHXTGWlWm1wN8NpTs9kxNmM0chCC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTVERi9DQkVGQ0Q5Q0U2
NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi9kZE1aYVZhYlhBM3cybE96MlRFMll6UnlF
SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RkTVphVmFiWEEzdzJsT3oyVEUyWXpSeUVJSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RTVERi9DQkVGQ0Q5Q0U2NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi9kZE1aYVZhYlhB
M3cybE96MlRFMll6UnlFSUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKrBi9Ctmt19tNDyHfVftkYaHdC7to8k7w8Xliu3HxRk4QqLkvW6M2IEpcjih
o7YafF+uvJCrGTxQh1EOzynk2RVtEnNQ0Fd/CZ/JeZw+opymzMXAGgeyzSOia7Eb
ExxdganW/nOmQoVFkcydAMtfy7OARjXpQSr8+LcCbsozwhlF3973b0M4xBRr7tiY
GE/GAraXwWdkeCOQfepHzpan6JZHcwoLlMgAXBxYraWmAYkpH5TXhCJHJ0Pb93qv
6W6ePv5sQ8BhMPVH6WxuJKojGchhC13dxKJqiEDR0SNbvVn2dynDwZ1R8vYHCnr8
BUwu/i2PL8RePyL3eK91GVZgww==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:56:12 2026 by rpki-client